kubernetes-architect

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill's gitops-workflow explicitly tells operators to fetch and apply public manifests (e.g., kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml) and to configure ArgoCD/Flux against arbitrary GitHub repos (repoURL: https://github.com/org/gitops-repo and flux bootstrap via https://fluxcd.io/install.sh), i.e., it ingests untrusted public repo/website content that will be read and can materially drive automated reconciliation/actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes runtime commands that fetch and execute remote content (e.g., curl -s https://fluxcd.io/install.sh | sudo bash and kubectl apply -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml), so external URLs are used to run remote code/manifests required by the skill.